Systems Engineering | Full-Stack Applications | Security Architecture | DevOps

Core Technologies & Toolchain

Domain	Stack & Ecosystem
Core Languages
Frontend & UI
Backend & APIs
Cloud & DevOps

A unified software portfolio engineered across desktop runtimes, interactive emulation, high-performance web platforms, and automated cloud delivery:

These repositories are open-source and publicly accessible on GitHub:

A lightweight, responsive Vue 3 Progressive Web Application (PWA) designed as a comprehensive alternative WebUI for qBittorrent.

• Drag-and-Drop RSS: Full feed hierarchy management with custom regex rule filtering.
• Telegram Bot Integration: Instant alerts pushed directly on torrent download completion.
• Multi-Server Switcher: Real-time management across multiple remote daemon instances with persistent local preferences.
• Security Hardened: Clamped route redirection guards, origin isolation, and zero query-string credential persistence.

A modular PowerShell debloat, privacy enforcement, and setup optimization toolkit for Windows 10 and 11.

• Audit Mode Support: Dry-run verification reports changes before system execution.
• Granular Feature Toggles: Selective removal of telemetry, consumer bloat, and unwanted background scheduled tasks.
• Zero Runtime Residue: Portable JSON profile export and import with zero external binary dependencies.

BiosSystem Neon Arcade: a cross-platform desktop arcade launcher and recreation engine.

• 11 Bundled Arcade Classics: Full recreations optimized for responsive input and 60 FPS rendering.
• GLSL CRT PostFX Shaders: Authentically simulated scanlines, shadow masks, curvature, and phosphor glow with bounds clamping.
• Native Gamepad API: Local co-op multiplayer support via HTML5 Gamepad API.
• Local Persistence: Secure high-score tracking and achievement unlocks via isolated local state.

A full-fidelity MapleStory v62 (GMS 2008) server emulator running over Apache MINA network sockets.

• Complete Content Coverage: Scripted party quests (KPQ, LPQ, OPQ, CWKPQ), boss instances (Zakum, Horntail, Pink Bean), Cygnus Knights, and Aran classes.
• Containerized Architecture: Packaged in Docker Compose with auto-importing MySQL database initialization for one-command deployment.
• High-Throughput Sockets: Non-blocking asynchronous I/O handling channel, world, and login network traffic.

Comprehensive applications, telemetry engines, and specialized platforms engineered across the software stack:

High-performance mobile gaming statistics tracker and live player analytics PWA.

• Direct Official APIs: Instantaneous player statistics, win rates, and battle logs straight from official Supercell developer endpoints.
• Multi-Game Aggregation: Unified tracking across Brawl Stars, Clash Royale, and PUBG Mobile.
• Competitive Metrics: Real-time trophy tracking, win/loss ratio graphs, and historical leaderboard indexing.

A local-first creator suite and hardware telemetry engine for USB CPU-cooler LCD panels (320x320).

• Custom Display Canvas: Converts cooler panels into real-time sensor dashboards, layered media canvases, and system gauges.
• Zero Vendor Bloat: Operates independently without keeping proprietary heavy vendor suites open.
• Hardware Telemetry: Direct sensor readings for temperatures, fan speeds, clock frequencies, and load graphs.

Post-apocalyptic multiplayer zombie survival roleplay framework engineered for GTA V FiveM.

• Dynamic Infection Mechanics: Custom health, hunger, stamina, infection progression, and medical treatment loops.
• Modular Factions: Territory control, safehouse construction, dynamic loot economy, and barter markets.

Standalone self-hosted network performance and bandwidth measurement service.

• Zero Third-Party Dependency: Pure internal benchmarking engine without third-party speedtest API rate limits.
• Granular Metrics: Measures download/upload throughput, ping, jitter, loaded latency, tail latency, and UDP packet loss.
• Automated Scheduling: Scheduled measurement daemons storing time-series telemetry in SQLite WAL mode.

Privacy-first URL shortening and link management service.

• Custom Routing: Custom alias creation, link expiration rules, and password-protected redirects.
• Telemetry & Analytics: Real-time click counter, referer breakdown, and geographical distribution.
• Abuse Prevention: Sliding-window rate limiting, origin verification, and bot detection filters.

Private invite-based BitTorrent tracker platform with an end-to-end TypeScript architecture.

• High-Performance Tracker: Dedicated NestJS announce and scrape daemon handling concurrent peer swarms.
• Modern Catalog UI: Next.js App Router member portal with category browsing, peer tables, and ratio enforcement.

Multi-agent AI token metering, protobuf telemetry decoding, and cost governance suite.

• Offline Ingestion Engine (omni-token-telemetry): Decodes protobuf and wire logs, executing monotonic high-water ratchets.
• Analytics Dashboard (tokens-dashboard): Next.js 15 App Router executive dashboard for real-time model token consumption and ROI reporting.

Sports analytics platform and dynamic odds computation sandbox.

• In-Play Market Pricing: Real-time odds conversion across decimal, American, and fractional representations.
• Interactive Bet Slip: Dynamic bet accumulation, payout multipliers, cash-out workflows, and live model simulation.

Interactive 3D geospatial intelligence platform rendering real-time spatial telemetry on a photorealistic digital globe.

• Live Entity Tracking: Simultaneous visualization of orbital satellites, commercial aviation, maritime vessels, and seismic events.
• Tactical HUD: WebGL-powered telemetry HUD with coordinates, altitude, velocity, and trajectory vectors.

Self-hosted Telegram e-commerce storefront bot.

• Telegram Stars Payments: In-app digital payments integration with invoice validation and order fulfillment.
• Security Middlewares: Sliding-window rate limiting, input sanitization against HTML injection, and parameterized queries.

• terraform-aws-bootstrap: Modular, secure-by-default AWS infrastructure deploying an isolated VPC across two AZs, a private-subnet EC2 instance accessible strictly via SSM Session Manager, and an encrypted S3 bucket with Checkov and TFLint validation.
• k8s-app-delivery: Production-grade Kubernetes GitOps application delivery sandbox with multi-stage Docker builds, liveness/readiness probes, and Trivy static security scanning in CI.

Detailed architecture specifications, hardening models, and security protocols: WIKI.md